Homeland 
Security 

Daily Open Source Infrastructure Report 

20 July 2015 

Top Stories 

• Massachusetts police arrested a suspect July 15 who is believed to be connected to a ring of 
Romanian ATM skimmers that have stolen over $1 million from Bank of America. - 
WFXT 25 Boston (See item 3) 

• Officials revealed July 15 that airline workers smuggled drugs through a Texas airport for 
distribution nationwide as part of an undercover operation orchestrated by Federal and 
local agents that led to the indictment of 46 people. - Washington Post (See item 12 ) 

• Aspen Foods, a subsidy of Koch Poultry Company of Chicago, is recalling approximately 
1,978,680 pounds of frozen, raw, stuffed, and breaded chicken products due to possible 
salmonella enteritis contamination.- Food Safety News (See item 15 ) 

• A Colorado man was convicted July 17 of 24 counts of first-degree murder from a July 
2012 theater shooting in which 12 people died and 70 others wounded. - CNN (See item 

20) 
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Energy Sector 



Nothing to report 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

1. July 16, U.S. Consumer Product Safety Commission - (National) Reliance Worldwide 
recalls Cash Acme Heatguard Temperature Actuated Flow Reducing (TAFR) 
devices due to scald hazard. Reliance Worldwide issued a recall for about 26,000 
Cash Acme Heatguard brand Temperature Actuated Flow Reducing devices due to an 
issue in which the device thermal element can fail to operate, posing a risk of scalding. 
Source: http://www.cpsc.gov/en/Recalls/2015/Reliance-Worldwide-Recalls-Cash- 
Acme-Heatguard-Temperature-Actuated-Flow-Reducing- 

Devices/?utm source=feedly&utm medium=rss&utm campaign=Recalls-rRSS 

Defense Industrial Base Sector 

Nothing to report 

Financial Seryices Sector 

2. July 17, Long Beach Press-Telegram - (California) ‘Cal Bear Bandit’ pleads guilty to 
bank robberies in Westminster. The suspect dubbed the “Cal Bear Bandit” pleaded 
guilty July 16 to charges surrounding 8 bank robberies across Orange County dating 
back to August 2014. 

Source: http://www.presstelegram.eom/general-news/20150716/cal-bear-bandit-pleads- 
guilty-to-bank-robberies-in- Westminster 

3. July 16, WFXT 25 Boston - (Massachusetts) Medford police arrest man possibly 
connected to ATM skimming ring. Police in Medford, Massachusetts arrested a 
suspect July 15 believed to be connected to a ring of Romanian ATM s ki mmers that 
have stolen over $1 million from Bank of America. The suspect allegedly stole over 
$100,000 from the bank and is linked to 4 other cases in Massachusetts. 

Source: http://www.mvfoxboston.com/storv/29566726/medford-police-arrest-man- 
possibly-connected-to-atm-skimming-ring 

4. July 16, Dow Jones Business News - (National) BMO Harris settles Ponzi scheme 
lawsuit for $16 million. BMO Harris Bank agreed to pay $16 million July 16 in a 
settlement with Palm Beach Finance Partners LP and Palm Beach Finance II LP, 
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resolving allegations that its subsidiary, M&I Bank, was complicit in a Ponzi scheme 
run by a Minnesota businessman that cost investors billions of dollars. 

Source: http://www.nasdaq.com/article/bmo-harris-settles-ponzi-scheme-lawsuit-for- 



16-million-20 1507 16-00873 



5. July 16, U.S. Department of Justice - (National) California payment processing 
company owner pleads guilty to fraud. The owner of California-based Check Site 
Inc., pleaded guilty July 16 to charges that he used his company to assist at least two 
fraudulent payday loan merchants who used consumer information to withdraw 
millions of dollars from consumer accounts without their knowledge by knowingly 
processing the transactions, and by providing the merchants access to the banking 
system via remotely created checks (RCC). 

Source: https://www.fbi.gov/philadelphia/press-releases/2015/califomia-payment- 
processing-companv-owner-pleads-guilty-to-fraud 

For additional stories, see items 9 and 22 

Transportation Systems Sector 

6. July 17, WSAZ 3 Huntington - (West Virginia) WB 1-64 re-opens after 9 vehicle 
crash. Interstate 64 westbound in Huntington has fully re-opened July 17 after being 
shut down for more than 8 hours while crews cleared the scene of an accident that 
involved 9 vehicles and spilled a large amount of diesel fuel onto the roadway July 16. 
Minor injuries were reported and the cause of the crash remains under investigation. 
Source: http://www.wsaz.com/home/headlines/Multiple-Vehicle-Crash-on-Westbound- 
I-64-Ties-Up-Traffic-3 1 601292 1 .html 

7. July 17, Associated Press - (New York) No one injured when tour bus catches fire 
on NY highway. Southbound lanes of Interstate 87 in Queensbury, was shut down for 
about 5 hours after a tour bus carrying 55 passengers caught on fire prompting the 
response of emergency crews July 16. No injuries were reported and passengers were 
put on another bus. 

Source: http://www.seattlepi.com/news/article/No-one-injured-when-tour-bus-catches- 
fire-on-NY-6390245.php 

8. July 17, Riverside Press-Enterprise - (California) Lake Elsinore: Ortega Highway 
blaze caused by crash; highway reopened. Ortega Highway 74 in Lake Elsinore was 
shut down for nearly a day July 15 while crews responded to a car accident that sparked 
a 5-acre bushfire. One injury was reported and authorities are investigating the crash. 
Source: http://www.pe.com/articles/fire-773457-highway-lake.html 

9. July 17, WBNS 10 Columbus - (Maryland) Armored truck spills cash inside highway 
tunnel. Baltimore’s Harbor Tunnel reopened July 16 after being shut down in both 
directions for approximately 7 hours while crews recovered money that fell out of the 
rear door of a Brinks armored truck July 15 after the truck’s door security 
malfunctioned. 

Source: http://www.10tv.com/content/stories/2015/07/17/ap-baltimore-maryland-cash- 
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spills-onto-highway.html 



10. July 16, WITI 6 Milwaukee - (Wisconsin) “Whole road engulfed in flames!” Ethanol 
tanker erupts following collision on Highway 33. Highway 33 near Horicon was shut 
down for over 9 hours July 16 while crews responded to a fire caused by a head-on 
collision that involved 2-vehilces, including an overturned semi-truck hauling ethanol 
which erupted into flames and critically injured 1 person. 

Source: http://fox6now.eom/2015/07/16/highwav-33-closed-near-horicon-due-to-crash/ 

11. July 16, Associated Press - (Washington) Delta jet makes emergency landing at Sea- 
Tac after engine fire. A Delta Air Lines flight headed from Alaska to George made an 
emergency landing at the Seattle Sea-Tac Airport July 16 after one of its engines 
caught fire due to an engine surge. The 255 passengers had to reschedule their flights 
for July 17. 

Source: http://www.komonews.com/news/local/Delta-jetliner-makes-emergency- 
landing-at-Sea-Tac-315802531.html 

12. July 16, Washington Post - (National) 46 indicted in alleged drug ring at Tex. 
airport. Officials revealed July 15 that airline workers smuggled drugs through 
Dallas-Fort Worth International Airport for distribution nationwide as part of an 
undercover operation orchestrated by Federal and local agents that led to the indictment 
of 46 people who allegedly helped carry drugs to evade the Transportation Security 
Administration, and board planes to Chicago, Las Vegas, Newark, Phoenix, Wichita 
and San Francisco. 

Source: http://readingeagle.com/ap/article/46-indicted-in-alleged-drug-ring-at-tex- 
airport 

Food and Agriculture Sector 

13. July 16, U.S. Food and Drug Administration - (National) D&D Foods issues allergy 
alert on undeclared milk and wheat in Hy-Vee American Macaroni Salad. Omaha, 
Nebraska-based D&D Foods, Inc. is recalling 3-pound containers of Hy-Vee American 
Macaroni Salad due to undeclared milk and wheat allergen. The product was 
distributed to Hy-Vee grocery stores nationwide. 

Source: http://www.fda.gov/Safetv/Recalls/ucm455Q96.htm 

14. July 16, U.S. Food and Drug Administration - (Minnesota; Illinois) Supervalu issues 
alert on undeclared milk in Cub Foods and Rainbow Foods Danish Rolls 4ct. 
Supervalu Inc. an Eden Prairie, Minnesota establishment, is recalling 13oz packages of 
Cub Foods and Rainbow Foods Danish Rolls due to an undeclared milk allergen. The 
product was produced and distributed to Cub Foods and Rainbow Foods location in 
Minnesota and Illinois. 

Source: http://www.fda.gov/Safetv/Recalls/ucm455 1 88.htm 

15. July 16, Food Safety News - (National) Nearly 2 million pounds of frozen, raw 
stuffed chicken products recalled. Aspen Foods, a subsidy of Koch Poultry Company 
of Chicago, is recalling approximately 1,978,680 pounds of frozen, raw, stuffed, and 
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breaded chicken products due to possible salmonella enteritis contamination. The 
products were shipped nationwide. 

Source: http://www.foodsafetvnews.eom/2015/07/nearlv-2-million-pounds-of-frozen- 
raw-stuffed-chicken-products-recalled/#.VajsINxBSUk 

Water and Wastewater Systems Sector 

16. July 16, KPIX 5 San Francisco - (California) Monterey beach closed after sewage 
spill at Cannery Row Restaurant. The Monterey County Environment Health Bureau 
closed access to McAbee Beach July 16 while officials procured water samples after 
reports of an unknown amount of sewage spilled from a Cannery Row restaurant that 
sits adjacent to the beach. 

Source: http://sanfrancisco.cbslocal.eom/2015/07/16/monterev-beach-closed-after- 
sewage-spill-at-cannery-row-restaurant/ 

Healthcare and Public Health Sector 

17. July 16, U.S. Department of Justice - (Pennsylvania) Superseding indictment adds 
charges and members of the Pagans to pill mill case against Pennsylvania doctor. 

A superseding indictment was unsealed July 16 charging a Pennsylvania osteopathic 
doctor and 8 additional defendants with allegedly distributing or conspiring to 
distribute controlled substances including oxycodone, methadone and amphetamines 
between March 2012 - January 2015 at a street value of approximately $5 million, 
among other charges. 

Source: https://www.fbi.gov/philadelphia/press-releases/2015/superseding-indictment- 

adds-charges-and-members-of-the-pagans-to-pill-mill-case-against-pennsylvania- 

doctor 



For another story, see item 22 

Government Facilities Sector 

18. July 16, Jefferson City News Tribune - (Missouri) Electrical malfunction believed to 
have caused fire at LU research center. The Dickinson Research Center at Lincoln 
University in Jefferson City, Missouri was evacuated July 16 after a 3-alarm fire caused 
considerable damage to the structure. Officials have not confirmed the cause of the fire, 
and one firefighter was treated for minor injuries. 

Source: http://www.newstribune.com/news/2015/iul/16/lu-research-center-fire/ 

19. July 16, Washington Post - (National) Federal personnel files still very vulnerable 
and ‘prime targets’ for hackers, audit finds. An audit by the U.S. Department of the 
Interior inspector general’s office found 3,000 “critical” and “high-risk” vulnerabilities 
in 3 unnamed key bureaus of the department, potentially allowing hackers to gain 
access to internal networks through hundreds of publicly accessible computers whose 
systems are compromised. A lack of central authority over the agency’s information 
technology systems is delaying fixes, according to the agency’s chief information 
officer. 
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Source: http://www.washingtonpost.eom/blogs/federal-eve/wp/2015/07/16/federal- 
personnel-files-still-very-vulnerable-and-prime-targets-for-hackers-audit- finds/ 



Emergency Services Sector 

20. July 17, CAW - (Colorado) Found guilty of murder in Colorado theater shooting. A 

Colorado man was convicted July 17 of 24 counts of first-degree murder from a July 
2012 theater shooting in which 12 people died and 70 others wounded. 

Source: http://www.cnn.eom/2015/07/16/us/james-holmes-trial-colorado-movie- 
theater- shoo tin g- verdict/index .html 

Information Technology Sector 

21. July 17, Help Net Security - (International) Nearly all Web sites have serious 
security vulnerabilities. Acunetix released a report on 15,000 Web site and network 
scans of 5,500 companies revealing that almost half of Web applications scanned 
contained high security vulnerabilities, and 4 of 5 were affected by medium security 
vulnerabilities, plying that most organizations fail to comply with the Payment Card 
Industry Data Security Standard (PCI DSS), among other findings. 

Source: http://www.net-securitv.org/secworld.php?id=18637 

22. July 16, Help Net Security - (International) New GamaPoS malware targets U.S. 
companies. Security researchers from Trend Micro reported that the operators are 
using the Andromeda botnet to deliver a new point-of-sale (PoS) malware called 
GamaPoS that scrapes data via Microsoft’s .NET platform, to U.S. financial, 
information technology, supply, hospitality, and retail organizations nationally, among 
others. 

Source: http://www.net-securitv.org/malware news.php?id=3077 

23. July 16, Threatpost - (International) TotoLink routers plagued by XSS, CSRF, RCE 
bugs. Security researchers reported that 15 TotoLink routers contain backdoor 
credentials, multiple remote code execution flaws that could allow an attacker to bypass 
administrator authentication and execute commands, and cross-site scripting (XSS) and 
cross-site request forgery (CSRF) vulnerabilities that could allow an attacker to change 
router network configuration settings. 

Source: https://threatpost.eom/totolink-routers-plagued-bv-xss-csrf-rce-bugs/l 13816 
For another story, see item W 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert. gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



24. July 17, Reuters - (National) T-Mobile to pay $17.5 million to settle U.S. 911 outage 
investigation. The Federal Communications Commission reported July 17 that T- 
Mobile US Inc. has agreed to pay $17.5 million to settle a U.S. investigation of two 911 
service outages in 2014 that prevented callers from reaching first responders for 3 
hours. 

Source: http://www.streetinsider.com/Corporate+News/T- 

Mobile+to+pay+S 1 7 . 5+million+to+settle+U. S .+911 +outage+investigation/ 1 073 1 828 .ht 
ml 

25. July 16, KSHB 41 Kansas City - (Missouri) Time Warner outage affects Liberty 
area, left thousands without service. Time Warner customers in the Liberty area 
experienced Internet, phone, and cable outages July 16 after a backhoe hit a fiber line 
near Interstate 35. Crews planned to have service restored by July 17. 

Source: http://www.kshb.com/news/region-missouri/liberty/time-warner-outage- 
affects-liberty-area 



Commercial Facilities Sector 

26. July 17, KCRA 3 Sacramento - (California) Rancho Cordova apartment fire causes 
roof to collapse. A July 17 fire destroyed several units, the building roof, and displaced 
20 residents at the Bishop Court Apartments in Rancho Cordova, California. Fire crews 
extinguished the flames and damages total $500,000. 

Source: http://www.kcra.com/news/local-news/news-sacramento/rancho-cordova- 
apartment-fire-causes-roof-to-collapse/342 16890 

27. July 16, WVEC 13 Hampton - (Virginia) 2 Hazmat situations in Va. Beach; some 
evacuations. Four businesses in Virginia Beach were evacuated July 16 following a 
propane leak that prompted HAZMAT crews to respond to the incident. No injuries 
were reported. 

Source: http://www.13newsnow.com/storv/news/local/mvcitv/virginia- 
beach/2015/07/16/propane-leak-forces-evacuation-of-4-va-beach-businesses/30231639/ 

For additional stories, see items 2^ and 2^ 

Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http ://w w w. dhs . gov/lPDail vReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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